Network Security Engineer (Firewall - Check Point, Palo Alto & Fortinet)

NTT SINGAPORE PTE. LTD.; Singapore; Presencial; SGD 90 000 - 120 000; Tempo integral

Resumo da oferta

NTT SINGAPORE PTE. LTD. is seeking an experienced Network Security Engineer (L2/L3) to support and maintain enterprise firewall infrastructure in Singapore. The role focuses on firewall operations, incident resolution, OS upgrades, and ongoing security compliance.

The candidate should be proficient with Check Point, Palo Alto, and Fortinet firewalls and have practical knowledge of BGP, OSPF, and IPsec VPN technologies. Night/weekend maintenance may be required.

Qualificações

• Diploma or Degree in IT, CS, Networking, or related field.
• 5+ years in Network Security or Firewall Engineering.
• Hands-on with Check Point, Palo Alto, and Fortinet firewalls.
• Experience with firewall OS upgrades, migrations, and refreshes.
• Knowledge of TCP/IP, BGP, OSPF, and static routing.

Responsabilidades

• Provide L2/L3 operational support for enterprise firewall infrastructure.
• Configure and troubleshoot Check Point, Palo Alto, and Fortinet firewalls.
• Perform firewall OS upgrades, security patches, and firmware maintenance.
• Support firewall migrations, technology refresh, and infra upgrades.
• Configure and troubleshoot BGP, OSPF, and static routing.
• Manage IPsec VPN connectivity and security policies.
• Investigate incidents, perform root-cause analysis, and resolve complex issues.
• Support high availability, failover, and DR testing.

Conhecimentos

Firewall Ops

L2/L3 support

BGP

OSPF

IPsec VPN

High Availability

Incident Resolution

Formação académica

Diploma or Degree in IT/CS

Ferramentas

Check Point

Palo Alto

Fortinet

Descrição da oferta de emprego

Network Security Engineer (Firewall - Check Point, Palo Alto & Fortinet)

Location: Changi, Singapore

Employment Type: 12-Month Renewable Contract

Experience: 4+ years in Network Security / Firewall Engineering

Job Summary

We are seeking an experienced and hands‑on Network Security Engineer (L2/L3) to support and maintain enterprise firewall and network security infrastructure. The role involves firewall operations, incident resolution, firewall OS upgrades, technology refresh projects, routing configuration, VPN administration, and security compliance.

The ideal candidate will have strong technical experience with Check Point, Palo Alto, and Fortinet firewalls, along with practical knowledge of BGP, OSPF, and IPsec VPN technologies.

Key Responsibilities

• Provide L2/L3 operational support for enterprise firewall infrastructure.
• Administer, configure, maintain, and troubleshoot Check Point, Palo Alto, and Fortinet firewalls.
• Perform firewall OS upgrades, security patching, and firmware maintenance.
• Support firewall migration, technology refresh, and infrastructure upgrade projects.
• Configure and troubleshoot BGP, OSPF, and static routing.
• Manage and troubleshoot Check Point IPsec VPN connectivity.
• Implement firewall security policies, rule changes, and configuration updates.
• Investigate incidents, perform root cause analysis, and resolve complex network security issues.
• Support firewall high availability, failover, and disaster recovery testing.
• Monitor firewall performance, availability, capacity, and security compliance.
• Collaborate with network, infrastructure, cybersecurity, application, and vendor teams.
• Maintain technical documentation, operational procedures, and incident reports.
• Participate in scheduled overnight maintenance, weekend implementations, and emergency support.
• Identify automation opportunities and drive operational improvements.

Requirements

• Diploma or Degree in Information Technology, Computer Science, Network Engineering, or a related discipline.
• Minimum 5 years of relevant experience in Network Security or Firewall Engineering, with L2/L3 operational support exposure.
• Hands‑on experience administering and troubleshooting enterprise firewalls, particularly Check Point, Palo Alto, and Fortinet.
• Practical experience performing firewall OS upgrades, migrations, and technology refresh activities.
• Strong understanding of TCP/IP networking, BGP, OSPF, and static routing.
• Experience configuring and troubleshooting Check Point IPsec VPN.
• Knowledge of firewall policies, NAT, high availability, failover, and network security best practices.
• Ability to troubleshoot complex firewall and network connectivity issues independently.
• Experience supporting enterprise or financial services infrastructure environments is advantageous.
• Relevant certifications such as Check Point CCSA/CCSE, Palo Alto PCNSA/PCNSE, Fortinet NSE/FCP/FCSS, or CCNA/CCNP would be advantageous.
• Willingness to support night, weekend, and after-hours maintenance activities when required.

Employment Type: 12-Month Renewable Contract